SEC Token Buyback Guidance: Safe Only With No Central Party

Short answer: On September 25, 2026 the staff of the SEC's Division of Corporation Finance published a set of FAQs on how securities law applies to crypto assets. Question 2.5 says that when an issuer announces a buyback of a non-security crypto asset, that announcement is not, by itself, a promise of the "essential managerial efforts" that make something an investment contract under the Howey test. On September 28, 2026 the staff revised that answer so it only applies where the crypto system is functional and has no central party. The FAQs are staff views with no legal force, and buybacks presented as yield on unfinished networks can still point toward a security.

What exactly did the SEC publish?

The document is titled "Frequently Asked Questions on the Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets" and sits on the Division of Corporation Finance page at sec.gov. It is organised in two groups: classification of crypto assets (questions 1.1–1.3, including staking receipt tokens and wrapped tokens) and crypto assets subject to investment contracts (questions 2.1–2.6, covering buybacks, post-launch development, marketing statements and who counts as a promoter).

The FAQs build on the Commission's interpretive release of March 17, 2026, which laid out the view that most crypto assets are not themselves securities and introduced the concepts of a "functional" system and a "central party". The new document does not redefine those terms; it points back to that release.

The staff also said that on a functional system, work to secure, maintain or improve it generally is not managerial effort in the Howey sense, and that describing existing uses of a network is not a promise of profit.

What changed on September 28?

Three days after publication, the staff edited Question 2.5. The original answer said a buyback announcement is not a managerial-efforts promise if the crypto system is functional. The revised answer adds the words "and has no central party". The SEC also posted a comparison showing the change, which observers called unusual for staff guidance.

The practical effect is to move the test from "does the software work" to "is anyone still in charge". A protocol whose treasury moves are fixed by on-chain code differs from one where a foundation, team multisig or admin key decides when and how much to buy; the second group no longer gets the Question 2.5 comfort automatically. Miles Jennings, general counsel at a16z crypto, welcomed the edit, saying the narrowing would make the guidance more durable and harder to misuse.

Item	Detail
Issued by	Staff of the SEC Division of Corporation Finance
First published	September 25, 2026
Revised	September 28, 2026 (Question 2.5)
Buyback view	Announcement is not a promise of essential managerial efforts if the system is functional and has no central party
Caveat	On non-functional systems, a buyback pitched as yield or return for holders could be such a promise
Legal status	Staff views only; no legal force, not approved by the Commission
Buyback volume, Jan–Aug 2026	About $638 million (vs $545 million a year earlier), per Allium data cited by CryptoSlate
Largest programs	Hyperliquid about $370 million, Pump.fun about $200 million — roughly 90% of the total

Which protocols run buybacks?

Buybacks have become one of the most common ways for a token to capture protocol revenue. According to Allium data cited by CryptoSlate, projects spent about $638 million on repurchases in the first eight months of 2026, and two programs dominate:

Hyperliquid (HYPE). Its Assistance Fund automatically routes the bulk of trading fees — reported at about 99% — into buying HYPE on the market. Because the process runs by protocol rules rather than a team decision, commentators see it as the kind of design the revised FAQ has in mind. Buybacks are only half of the supply picture, though: our piece on the HYPE token unlock in September 2026 covers the other half.
Pump.fun (PUMP). The memecoin launchpad uses platform revenue to repurchase PUMP; it accounted for about $200 million of this year's total.
Uniswap (UNI) and Aave (AAVE). Uniswap switched on protocol fees with a UNI burn in December 2025, and Aave has run a treasury buyback. How each fits the "no central party" test depends on who actually controls the treasury.

Why does it matter?

US lawmakers have not settled crypto market structure: the CLARITY Act failed its Senate vote earlier this month, so the 1946 Howey test and SEC staff interpretation remain the working framework. In that setting, a short staff FAQ carries real weight for token design. Teams that want the comfort of Question 2.5 now have a reason to move treasury decisions on-chain, remove override keys and avoid marketing buybacks as income.

The limits are just as important. The staff views do not bind the Commission, a future SEC or courts. The answers are explicitly fact-specific: how a token was sold, who controls the protocol and what holders were told still decide the outcome. And the guidance says nothing about whether a buyback is good for holders — only that announcing one is not, alone, a promise of managerial effort.

How to read "buyback" tokenomics claims: a checklist

Compare buybacks with new supply. A program that repurchases $30 million a month does little if unlocks and emissions add more than that. Check the unlock schedule before the buyback dashboard.
Ask who presses the button. Is the buyback coded into the protocol, or decided by a foundation or multisig that can pause it? The SEC now draws the same line.
Check where bought tokens go. Burned tokens leave supply; tokens parked in a treasury can come back to the market later.
Look at the revenue source. Buybacks funded by real fees are different from buybacks funded by selling treasury tokens or new fundraising.
Treat "yield" language as a red flag. A buyback pitched as passive income is exactly what the staff warned about for unfinished networks.
Remember holders have no claim. A token is not a share; programs can be paused or changed by governance at any time.

If you trade in or out of such tokens, compare rates across services on the exchangers list rather than relying on one venue. This article is information, not investment advice.

Also this week
CFTC and Coinbase	On September 28, 2026 the CFTC registered Coinbase Clearing LLC as a derivatives clearing organization, limited to fully collateralized futures, options on futures and swaps; Coinbase says it will use USDC as collateral with round-the-clock settlement.
Morgan Stanley	On September 29, 2026 Morgan Stanley said it has opened a Digital Asset Lab, separate from its core systems, to test stablecoins, tokenization and DeFi; no client launch date was given.

FAQ

What did the SEC say about token buybacks?

In FAQs published on September 25, 2026, SEC Corporation Finance staff said an issuer's announcement of a buyback of a non-security crypto asset does not by itself promise essential managerial efforts under the Howey test. On September 28, 2026 they limited this to crypto systems that are functional and have no central party.

Does this mean tokens with buybacks are not securities?

Not automatically. The FAQ only says the buyback announcement alone does not create an investment contract in those conditions. Whether a token is sold as a security still depends on how it was marketed, who controls the network and what buyers were promised.

What does "no central party" mean?

The FAQ refers back to the SEC interpretive release of March 17, 2026. In practice, it means no person or group, such as a founding team, foundation or multisig, has control that could decide the success or failure of the system, including control over treasury and buyback decisions.

Is the SEC buyback guidance legally binding?

No. The FAQs are staff views, not a rule or Commission statement, and they state that they have no legal force or effect. They signal how staff currently think but can be changed or withdrawn.

Which crypto projects spend the most on buybacks?

According to Allium data cited by CryptoSlate, projects spent about $638 million on buybacks from January to August 2026. Hyperliquid accounted for about $370 million and Pump.fun for about $200 million, roughly 90% of the total.